802.1X must be enabled both globally in system view and for the intended ports in system view or
interface view. Otherwise, it does not function.
You can configure 802.1X parameters either before or after enabling 802.1X.
Related commands: display dot1x.
Examples
# Enable 802.1X for ports GigabitEthernet 1/0/1, and GigabitEthernet 1/0/5 to GigabitEthernet 1/0/7.
<Sysname> system-view
[Sysname] dot1x interface GigabitEthernet 1/0/1 GigabitEthernet 1/0/5 to GigabitEthernet
1/0/7
Or
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dot1x
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] interface GigabitEthernet 1/0/5
[Sysname-GigabitEthernet1/0/5] dot1x
[Sysname-GigabitEthernet1/0/5] quit
[Sysname] interface GigabitEthernet 1/0/6
[Sysname-GigabitEthernet1/0/6] dot1x
[Sysname-GigabitEthernet1/0/6] quit
[Sysname] interface GigabitEthernet 1/0/7
[Sysname-GigabitEthernet1/0/7] dot1x
# Enable 802.1X globally.
<Sysname> system-view
[Sysname] dot1x
dot1x authentication-method
Syntax
dot1x authentication-method { chap | eap | pap }
undo dot1x authentication-method
View
System view
Default Level
2: System level
Parameters
chap: Authenticates supplicants using CHAP.
eap: Authenticates supplicants using EAP.
pap: Authenticates supplicants using PAP.
4-5